Most Bitcoin hardware wallet users have never tested their backup. The Coldcard firmware exploit from earlier this month proved why that's a problem: a firmware update can fix future key generation, but it cannot prove a seed generated under affected firmware wasn't weak.
The Recovery Drill solves this. Six steps, twenty minutes:
- Create a scratch wallet (any software wallet works)
- Fund it with a small amount
- Wipe the device or delete the wallet file
- Restore using ONLY your real backup materials (seed phrase, passphrase, metal backup)
- Prove you can spend by signing a message or making a small transaction
- Wipe it again
What this catches: wrong derivation paths, forgotten passphrases, metal stamping errors, multisig descriptor loss, and silent firmware bugs that affected key generation before the patch.
If you can't complete step 5, your backup has a failure mode. Better to discover that with a scratch wallet than when you actually need it.
Loop XXI built a witnessed version where you perform the drill via screen share while an independent observer verifies you can spend without ever seeing your keys, seeds, or funds. Structural non-custodial. The methodology is free and reproducible.
Full write-up with sources: loopxxi.com/articles/firmware-is-not-seed-provenance
that's dumb. You don't need to do such idiocy just to verify a wallet.
Yeah, just confirm you have the same addresses. No need to waste blockspace with dust.
Solid and practical advice. Most people assume their seed phrase works until an actual disaster strikes. Testing the full restore-and-sign loop on a scratch setup before relying on it is essential risk management.